$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa File: 673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json) Hash identifier: VfRNJpxrVYE+sDVD+QvT9ESn+5Ysthtlf5pSM7+OIDY= Subject key identifier: F6:62:8A:D0:F9:87:84:3B:A5:A3:7A:60:67:2D:4E:F9:7E:08:A9:3A Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B2E5C4A553FD8B37F9A1F8C70 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 16433 IP address blocks: 160.79.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4a:55:3f:d8:b3:7f:9a:1f:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=76bf8898-60c2-446b-9df0-1bd26b4982fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:92:51:c3:1e:4a:79:8d:90:66:f9:de:d3:71: 94:db:1c:3e:7c:dc:f4:14:31:dd:5c:3c:b0:a4:66: 22:fe:ee:b7:34:34:09:92:28:3d:ec:1d:b0:4b:e4: f6:6d:cb:c8:da:2f:6d:dc:e8:aa:b2:5f:5c:16:c1: fb:89:09:1f:79:eb:39:c8:69:78:34:2d:44:99:88: 9b:0c:23:bd:63:a2:87:52:4f:13:c3:a9:df:d0:42: 41:53:72:fc:fe:8e:15:fa:46:0d:dd:70:c4:0f:16: e5:53:0c:0c:5b:09:a1:45:90:a5:46:ad:74:35:1f: aa:85:4b:3f:80:69:c2:55:95:ad:a4:c1:6d:38:6c: 16:b7:bc:2d:38:19:93:33:e8:78:69:6d:f0:48:35: 90:0a:2e:0e:72:ea:34:50:cb:50:ed:10:dd:2d:12: 18:41:07:0b:fe:4e:28:10:3c:bd:8c:bb:78:55:0e: 81:d4:e8:da:3e:e4:38:6e:fb:1d:b8:88:50:93:db: 6c:16:d9:a8:c2:48:1b:77:fc:24:85:da:65:d2:20: d9:d5:36:c2:76:9e:ac:c1:df:f8:c2:7b:b9:d3:79: 30:5b:9c:a9:23:7c:ff:94:fe:18:1f:e5:a9:57:5b: 79:6a:be:fd:c6:6c:6f:08:81:cc:68:d5:71:06:9b: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:8A:D0:F9:87:84:3B:A5:A3:7A:60:67:2D:4E:F9:7E:08:A9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 160.79.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:95:3f:a8:22:ea:8c:f5:e6:8a:4f:f7:49:a3:b4:a0:a8:fa: e3:71:6b:cd:65:89:1a:4b:c5:a9:4c:68:81:bd:7f:df:d7:ff: 7d:f2:a0:f9:db:61:83:9d:ce:d9:bf:08:2a:2d:13:7b:4f:ec: 32:65:be:e2:c0:0d:04:c6:19:02:19:de:fd:16:0d:cb:ab:a2: 35:1e:68:75:9a:c9:dc:77:6e:a2:52:9c:6c:75:a2:3e:dc:1b: 61:0d:ad:d3:3f:e4:54:71:91:bc:d8:b0:59:3c:aa:27:40:7c: a3:b4:3f:05:39:ad:6f:f5:e1:22:2e:78:3f:78:dd:74:aa:c7: ee:6c:0c:a8:93:cc:2c:9d:ad:d7:52:c6:ac:02:d0:a8:ea:ba: d9:e4:61:ec:80:5a:9a:5b:d7:bf:03:22:27:79:a8:c8:87:45: 25:9d:29:e0:37:54:6f:09:35:e5:67:3c:b2:ff:88:e0:10:f2: 73:49:2d:97:e7:bf:b1:11:90:d0:3e:63:dc:de:71:e5:46:57: 25:c9:65:b4:0f:5f:e2:da:85:91:8d:b5:68:9d:ff:7b:eb:45: ed:88:6a:2e:4f:d3:7f:5e:b8:d3:cf:25:6c:60:bb:63:36:6a: 3c:c5:20:53:3c:b1:c7:1d:ca:25:66:4f:3e:a6:b7:8f:1f:b5: fd:99:d7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEpVP9izf5ofjHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NzZiZjg4OTgtNjBjMi00NDZiLTlkZjAtMWJkMjZiNDk4MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJJRwx5KeY2QZvne03GU2xw+fNz0FDHdXDyw pGYi/u63NDQJkig97B2wS+T2bcvI2i9t3Oiqsl9cFsH7iQkfees5yGl4NC1EmYib DCO9Y6KHUk8Tw6nf0EJBU3L8/o4V+kYN3XDEDxblUwwMWwmhRZClRq10NR+qhUs/ gGnCVZWtpMFtOGwWt7wtOBmTM+h4aW3wSDWQCi4Ocuo0UMtQ7RDdLRIYQQcL/k4o EDy9jLt4VQ6B1OjaPuQ4bvsduIhQk9tsFtmowkgbd/wkhdpl0iDZ1TbCdp6swd/4 wnu503kwW5ypI3z/lP4YH+WpV1t5ar79xmxvCIHMaNVxBptuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZiitD5h4Q7paN6YGctTvl+CKk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNjczZmM1ZjEtODNmNi0z N2JmLWExNTUtNDEzOGExYjdhMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoE8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2VP6gi6oz15opP90mjtKCo+uNxa81liRpLxalMaIG9f9/X/33yoPnb YYOdztm/CCotE3tP7DJlvuLADQTGGQIZ3v0WDcurojUeaHWaydx3bqJSnGx1oj7c G2ENrdM/5FRxkbzYsFk8qidAfKO0PwU5rW/14SIueD943XSqx+5sDKiTzCydrddS xqwC0KjqutnkYeyAWppb178DIid5qMiHRSWdKeA3VG8JNeVnPLL/iOAQ8nNJLZfn v7ERkNA+Y9zeceVGVyXJZbQPX+LahZGNtWid/3vrRe2Iai5P039euNPPJWxgu2M2 ajzFIFM8sccdyiVmTz6mt48ftf2Z1zY= -----END CERTIFICATE-----Generated at Sun Oct 19 01:04:40 2025 by rpki-client